Lucene search
+L

26 matches found

NVD
NVD
added 2024/11/06 4:15 p.m.22 views

CVE-2024-10920

A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this issue is the function doFilterInternal of the file travels-java-api-master\src\main\java\io\github\mariazevedo88\travelsjavaapi\filters\JwtAuthenticationTokenFilter.java of the...

3.7CVSS0.00441EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2024/11/06 4:0 p.m.34 views

CVE-2024-10920 mariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key

A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this issue is the function doFilterInternal of the file travels-java-api-master\src\main\java\io\github\mariazevedo88\travelsjavaapi\filters\JwtAuthenticationTokenFilter.java of the...

3.1CVSS0.00441EPSS
SaveExploits2References4
CVE
CVE
added 2024/11/06 4:0 p.m.84 views

CVE-2024-10920

CVE-2024-10920 affects travels-java-api (versions up to 5.0.1). The vulnerability exists in the JwtAuthenticationTokenFilter.doFilterInternal function of the JWT Secret Handler component, where a hard-coded cryptographic key is used. This enables remote exploitation with high attack complexity an...

3.7CVSS3.9AI score0.00441EPSS
SaveExploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/06 4:0 p.m.26 views

CVE-2024-10920 mariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key

A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this issue is the function doFilterInternal of the file travels-java-api-master\src\main\java\io\github\mariazevedo88\travelsjavaapi\filters\JwtAuthenticationTokenFilter.java of the...

3.1CVSS4.2AI score0.00441EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2024/11/06 12:0 a.m.9 views

travels-java-api 安全漏洞

travels-java-api is an API for travel management from the individual developer Mariana Azevedo. A security vulnerability exists in travels-java-api version 5.0.1 and earlier, which stems from the use of hard-coded encryption keys in the doFilterInternal function in the JWT Secret Handler componen...

3.7CVSS4.2AI score0.00441EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2024/11/06 12:0 a.m.8 views

PT-2024-16642 · Unknown · Travels-Java-Api

Name of the Vulnerable Software and Affected Versions: travels-java-api versions up to 5.0.1 Description: A vulnerability was found in the travels-java-api, classified as problematic. The issue affects the function doFilterInternal of the file...

3.7CVSS6.8AI score0.00441EPSS
SaveExploits2References10
Rows per page
Query Builder